General

  • Target

    ef4cb01e4a1707d362f90fc1fbcc711a005dc67c4e717d57c2e12ded1522d435

  • Size

    1.3MB

  • MD5

    a151b96808cccf9a595248150a03c918

  • SHA1

    75d95f8214a014524df1251acb256bcfa80e5e86

  • SHA256

    ef4cb01e4a1707d362f90fc1fbcc711a005dc67c4e717d57c2e12ded1522d435

  • SHA512

    087c88f83b6db2b16b098e1b1ffe565b6b476a175c4a6b1e5737c2f309ab0d16e4b26a822f34e69746b75a7ba527c3e407f16b5e0a3a5a38b8755f5bb6a6a570

  • SSDEEP

    24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcUroVoqhEvkTRAFHfcSdoOmXEZQbsBCdv4:knw9oUUEEDl37jcHhEWAuOQrg

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ef4cb01e4a1707d362f90fc1fbcc711a005dc67c4e717d57c2e12ded1522d435
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections